Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa
File: OXdepfqZtgrqWGsPoR3DP4M3l08.roa (raw, json)
Hash identifier: tAIiNtNAzyWzUckVn5drWt0ahVWLWaqMn6PMK/utbwk=
Subject key identifier: 39:77:5E:A5:FA:99:B6:0A:EA:58:6B:0F:A1:1D:C3:3F:83:37:97:4F
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0C45
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa
Signing time: Mon 26 Aug 2024 05:19:23 +0000
ROA not before: Mon 26 Aug 2024 05:19:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131619
IP address blocks: 103.116.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Aug 26 05:19:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39775EA5FA99B60AEA586B0FA11DC33F8337974F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:f3:d0:75:11:40:68:f3:c1:12:49:04:47:
82:fd:1e:8e:21:65:c9:ca:99:67:90:ce:4e:a3:d6:
2b:d6:00:30:99:a9:3c:3a:07:d8:53:90:08:15:fd:
6e:b4:51:39:a6:b4:d7:b6:bf:31:d2:61:9b:8c:cf:
b3:03:71:3a:c3:1a:b4:42:a4:cc:5a:37:09:c7:65:
43:19:a2:44:4f:3a:dd:99:60:db:1a:18:36:5d:35:
56:4f:77:2c:da:1c:81:10:cc:bf:b3:dd:6f:60:d9:
55:1c:00:a3:ee:25:22:cf:d4:df:75:66:e7:0b:f7:
6e:1e:9d:c8:7e:a6:2c:2b:63:37:7a:1f:e0:da:f4:
8f:2a:cf:62:da:05:ce:59:23:3a:f4:4c:a6:c9:de:
35:49:b4:24:1f:ca:4f:f6:ad:e9:bd:5e:d1:2c:92:
9d:93:96:4d:c7:06:90:01:ff:45:0b:d0:08:26:f8:
21:0d:fb:ca:7b:a9:7e:64:a6:d0:28:13:24:69:93:
53:33:9a:a4:38:9f:ec:ab:77:e6:d1:53:55:20:15:
c1:49:55:74:67:1d:34:7b:fa:f0:3e:af:b3:89:e6:
f9:22:70:8c:77:53:85:ca:a7:c7:89:6d:a0:6d:9b:
63:32:0e:b7:eb:ca:05:46:c1:2a:c8:a6:8e:c6:e3:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:5E:A5:FA:99:B6:0A:EA:58:6B:0F:A1:1D:C3:3F:83:37:97:4F
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.99.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2c:c5:06:5a:83:ca:24:fd:84:58:45:01:5f:1b:0d:db:1b:
94:8d:56:d7:bc:2b:ad:04:ec:85:f5:40:15:75:a4:08:33:1a:
8d:01:72:3b:c5:15:b7:97:bd:89:7c:70:ee:0d:ce:8d:89:dd:
ca:ed:f5:7e:e3:45:9a:6c:78:fa:44:05:05:49:13:db:ea:d0:
9a:d6:77:00:d4:66:5b:18:7f:5b:cd:2d:df:83:4a:4d:5f:1c:
69:b4:22:d5:e4:e0:40:03:1b:1e:71:c1:26:bb:df:69:b8:27:
2c:bb:cd:19:0d:7a:d2:c5:63:b9:8a:5c:0e:3a:53:f3:57:9c:
5e:87:8e:cc:fb:46:e4:d9:99:a9:4d:13:9c:a0:8b:df:00:9c:
1a:ef:b8:d0:9c:08:1e:d5:67:5f:5b:e1:3b:a6:2e:98:34:72:
23:e0:a2:10:8d:a0:8a:59:11:f7:45:1d:15:14:24:7c:57:a7:
33:68:85:7e:44:61:35:5f:f5:34:b7:02:f8:33:79:a8:19:6f:
f9:17:ac:57:47:08:19:1f:7c:f5:86:91:f4:b7:a5:1f:b2:19:
55:c3:f9:80:67:52:28:02:cc:35:47:ab:fe:c3:de:8f:bc:a9:
1b:97:ac:a7:e7:29:a6:a0:fa:29:44:ac:da:41:e0:9b:74:ea:
03:50:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:47 2025 by rpki-client